51526e5f40513a67474bcba388735bf560ab3a64e0e6363d0a9558a96503c944 | Triage

Sharing

General

Target

fb0e97d9560701c536df035e00cc0833_JaffaCakes118
Size

644KB
Sample

240927-2x8vxawfmh
MD5

fb0e97d9560701c536df035e00cc0833
SHA1

13b696b61802accd391d1e04b202ca3947dfd4cf
SHA256

51526e5f40513a67474bcba388735bf560ab3a64e0e6363d0a9558a96503c944
SHA512

13370119c48f5cdc255ea9af7cf198244960a39ecc60adb51f545c01f0f95bc4326c23f6f1ab61cf2fad0f568bc177efc8d092f88b850e14b11a4eb68ca5ad69
SSDEEP

12288:aNPgdGjqBrlp25CwMUZOM1GFSwJfZSlrCuAE/5/2IX+hMyZN2PvOzDmhoNII:aNUiq9lpidwMY/irp5ryZNiv6mhor

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fb0e97d9560701c536df035e00cc0833_JaffaCakes118
- Size
  
  644KB
- MD5
  
  fb0e97d9560701c536df035e00cc0833
- SHA1
  
  13b696b61802accd391d1e04b202ca3947dfd4cf
- SHA256
  
  51526e5f40513a67474bcba388735bf560ab3a64e0e6363d0a9558a96503c944
- SHA512
  
  13370119c48f5cdc255ea9af7cf198244960a39ecc60adb51f545c01f0f95bc4326c23f6f1ab61cf2fad0f568bc177efc8d092f88b850e14b11a4eb68ca5ad69
- SSDEEP
  
  12288:aNPgdGjqBrlp25CwMUZOM1GFSwJfZSlrCuAE/5/2IX+hMyZN2PvOzDmhoNII:aNUiq9lpidwMY/irp5ryZNiv6mhor
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2